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Abstract. We give a function F(d,n,p) such that if K/Q p is a degree n 
field extension and A/K is a ci-dimensional abelian variety with potentially 
good reduction, then #j4( K ) [tors] < F(d,n,p). Separate attention is given 
to the prime-to-p torsion and to the case of purely additive reduction. These 
latter bounds are applied to classify rational torsion on CM elliptic curves 
over number fields of degree at most 3, on elliptic curves over Q with integral 
j (recovering a theorem of Frey) , and on abelian surfaces over Q with integral 
moduli. In the last case, our efforts leave us with 11 numbers which may, 
or may not, arise as the order of the full torsion subgroup. The largest such 
number is 72. 

1. Introduction 

Let K be a field. We say that torsion is strongly bounded for abelian varieties of di- 
mension d over K if for all finite field extensions L/K and all d-dimensional abelian 
varieties A/L, there exists an N = N(d, [L : K]) such that #A(L)[tors] < N. (If 
we left out the "strong," it would mean that N is allowed to depend on L and not 
just its degree over K.) Note that it is equivalent to require the order of any torsion 
point on A(L) to be bounded dependent only on d and [L : K\. Also, if K' /K is a 
finite field extension, then if torsion is strongly bounded over K, it is automatically 
strongly bounded over K' . 

Example 1: Torsion is strongly bounded in every dimension d for abelian vari- 
eties over K = ¥ p , since the Weil bounds imply that for any <i-dimensional abelian 
variety A/¥ p n we have (as we shall recall in Section 2) 

(1) #A{¥ pn ) < (l+p n / 2 ) 2d . 



"Example" 2: A celebrated theorem of Merel Mer] asserts that torsion is strongly 
bounded when d = 1 and K = Q. It has been conjectured by many that torsion 
is strongly bounded for abelian varieties A/Q in every dimension d, but this seems 
much beyond present reach. 

It follows from Examples 1 and 2 that torsion is strongly bounded for elliptic curves 
over any finitely generated field K. However, the uniform boundedness of torsion 
among all elliptic curves fails over most other fields of arithmetic interest. For in- 
stance: 

Example 3: Torsion is not bounded for elliptic curves over Q p : on the Tate curve 
E p ,i — G m / (p n ), the point p has exact order n. 
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Note that Tate curves are characterized by having split multiplicative reduction. 
On the other hand, it follows easily from Example 1 that at least the prime-to-p 
torsion is strongly bounded among all abelian varieties A/Q p with good reduction. 
The main result of the present paper is that strong boundedness holds for a some- 
what wider class of abelian varieties over local fields. 

First some terminology and notation: In this paper, a complete field means a field 
K complete with respect to a discrete valuation v, and a local field is a complete 
field with finite residue field, whose characteristic we denote by p. The absolute 
ramification index of a local field is e — v(p) < oo. If A/K is an abelian variety 
over a local field, then ^(if)^ 00 ] denotes the subgroup of p-primary torsion and 
A (!£") [tors]' denotes the subgroup of torsion of order prime to p. 

Recall that an abelian variety over a complete field K is said to have potentially 
good reduction if there exists a finite field extension L / K such that the base change 
of A to L is the generic fibre of an abelian scheme over the valuation ring of L. If R 
is an (arbitrary) Dedekind domain with quotient field K , we will say that an abelian 
variety AjK has integral moduli if for every prime ideal v of R, the base change 
of A to the completion of K at v has potentially good reduction. 1 Sometimes for 
brevity we shall speak of an "IM abelian variety," which means an abelian variety 
defined over a number field and having integral moduli. 

For p a prime number and D a positive integer, define 



It is well-known (e.g. (Ell) that if p > 2d + 1, m p (2d) = 0. 

For a positive real number x, let [x] be the greatest integer which is at most x 
and [x] p be the largest power of p which is at most x. 

Main Theorem. Let K be a local field with residue cardinality q — pf and absolute 
ramification index e. Let A/K be a d-dimensional abelian variety with potentially 
good reduction. 



c) Suppose K is p-adic and A/K has purely additive reduction. Then the only 
primes £ ^ p dividing $=A(K)[tors] are those for which £ < 2d + 1. Moreover, there 
exists a function Z(d,e) - i.e., independent of the residue characteristic and the 
inertial degree - such that ^4(if)[tors] < Z{d,e). 

In particular, torsion is strongly bounded among d-dimensional abelian varieties 
over Q p with potentially good reduction. 

Remark: Notice that if p > max{e + I, 2d + 1}, the exponent of the power of 

lr The "moduli" are the coordinates of the point induced by A (together with some choice of 
polarization) on a suitable Siegel moduli scheme. However, in the sequel we will only need to 
know that an elliptic curve has integral moduli iff its j'-invariant lies in _R. 
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p in part b) is zero. 

Remark: Essentially the same result has also been proved - independently, but 
with almost identical methods - by Xavier Xarles. The only notable difference is 
that we give a direct proof of part a) and use this to take care of the prime-to-p 
torsion in the general case, whereas Xarles' argument uses results of Lorenzini to 
give bounds on the prime-to-p part of the component group in terms of the addi- 
tive rank. However, in our applications we will either have to assume the reduction 
could be good (the worst-case scenario!) and use the bound of part a), or we will 
be able to argue for a "not especially nasty" place of purely additive reduction and 
use the stronger bound of part c). It is worth mentioning that we never apply the 
bound of part b) directly 

We will give the proof of the Main Theorem in Section 2, beginning in Section 
2.1 with the proof of part a). Section 2.2 gives a discussion of certain basic results 
about Neron models, formal groups, and component groups, which are then used to 
prove the rest of the theorem in Section 2.3. In Section 2.4 we discuss open prob- 
lems, comparisons with the elliptic curve case, and mention a considerably more 
general boundedness theorem due to Xarles which was conjectured (or rather, "sug- 
gested") in an earlier draft. 

One consequence of the Main Theorem is that totally indefinite quaternionic Shimura 
varieties with Ti(./V)-level structure will, for sufficiently large N, fail to have points 
rational over any given p-adic field. Because it is somewhat technical to make 
precise the moduli problem corresponding to a Ti(./V)-level structure in the higher- 
dimensional case, we will content ourselves here with the (representative) case of 
Shimura curves over Q, in which case a careful description of the moduli problem 
may be found in |Buz| . 

Theorem 1. Let B/Q be a nonsplit, indefinite rational quaternion algebra with 
discriminant D, let N be a positive integer prime to D, and let X[* (7V)/Q be the 
Shimura curve with T\{N)-level structure. Let K be a p-adic field with residue field 
¥ q , and consider the curve Xf(N)/K. Then there exists N = N ([K : Q p ]) (but 
independent of D) such that for all N > N , X?(N)(K) = 0. 

Proof: For N > 4 and F/Q any field of characteristic zero, to a point P E 
Xi (N)(F) we can associate A/F an abelian surface, l : B <— > Endj?^) £g> Q a 
quaternionic multiplication (QM) structure, and p £ A(F) a point of exact order 
N . Now suppose K is a local field and P = (A, i,p) e X^{N){K). A QM surface 
necessarily has potentially good reduction. 

Indeed, any e?-dimensional abelian variety admitting as a subring of endomor- 
phisms an order O in a 2d-dimensional division algebra has potentially good reduc- 
tion (note that this includes also the CM case). We sketch the proof: by a theorem 
of Grothendieck, after a finite base change there is no additive part; moreover, the 
character group, if nontrivial, would be the underyling Z-module of a (necessarily 
faithful) representation of 0, but its dimension is at most d, whereas any nontrivial 
representation of O has dimension at least 2d. 

Thus the result follows immediately from the Main Theorem. 
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Evidently the Main Theorem can also abe applied to bound the torsion subgroup 
of an abelian variety over a number field with integral moduli. Indeed: 

Corollary 2. Let A/K be a d- dimensional abelian variety over a degree n number 
field K/Q. 

a) Assume that A has potentially good reduction at places i>2,V3 of K over 2 and 3. 
Then #A(if )[tors] < [(1 + 2™/ 2 ) 2d ][(l + 3™/ 2 ) 2d ]. 

b) Assume that A has potentially good reduction at a place v-i of K over 2. 
Then the maximum prime order of a torsion point is [(1 + 2 n / 2 )] 2d ]. 

Proof: For part a), let 12 : A(if) [tors] — > A(K V2 ) [tors]' be the composite of the 
natural embedding of the global torsion points into the local torsion points with 
projection onto the prime-to- 2-torsion, and define l% : A(K)[tors] — > ^4(^3) [tors]' 
similarly. Then the product map 

t 2 xi 3 : A(K)[tors] -> A(K V2 )[tors]' x A(K V3 )[tors}' 

is evidently an injection, so the result follows from Theorem la). Injecting the odd 
order torsion into A(K V2 )[tors)' gives part b). 

Remark: The existence of a strong bound on torsion for IM varieties is due to 
Alice Silverberg Sg92 , SgOl . She gives the bound: 



(2) #A(/O[tors] < [(1 + 2* GL ^ 3 ^ 2 )(l + 3#GL 2d (Z/4Z)n/2^2d_ 

As an example of the improvement that the present results provide, in the case of 
abelian surfaces over Q, Corollary 2 gives #A(Q) < 1815, while Silverberg's bound 
is approximately 4.0262 x 10 1275357349 . 

But the bound of Corollary 2a) is still visibly far from the truth: because we are 
double counting the prime-to-6 torsion, we will in practice get much better bounds 
by applying part a) of the Main Theorem prime by prime and collating the results. 
The point that we want to emphasize is that, at least when the number field degree 
is small, this collation process leads to short lists 2 of possible orders for the torsion 
subgroup - i.e., it becomes feasible to give serious individual consideration to each 
of the elements on the list as to whether or not they actually arise globally. 

Indeed, in some cases the lists are so short that the temptation to try to decide 
whether or not they are optimal has proved to be irresistible, and the remainder 
of the paper - which has a different and more computational character - is de- 
voted to this investigation. We prove the following results (of which only the last 
is completely new): 

Theorem 3. Let E/Q be an elliptic curve with everywhere potentially good reduc- 
tion. Then _E(Q)[tors] is one of the following groups: 

(3) 0, Z/2Z, Z/3Z, Z/4Z, Z/6Z, Z/2Z0Z/2Z. 

Conversely, all such groups occur among elliptic curves E/Q with j = and j = 
1728. 



2 Readers will have to judge for themselves whether or not the lists we give are too short, in 
light of the current academic job market, to sustain the analogy. 
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Theorem 4. Let K be a number field of degree d, and E/K an elliptic curve which 
admits complex multiplication over K . 

a) If d — 2, then E(K) [tors] is one of the following groups (all of which occur): 
Z/nZ for n e {1, 2, 3, 4, 6, 7, 10}, Z/2Z x Z/2nZ for n e {1, 2, 3, 4}, Z/3Z x Z/3Z. 

b) If d = 2>, then E(K)[tors] is one of the following groups (all of which occur): 
Z/nZ for n <E {1, 2, 3, 4, 6, 9, 14}, Z/2Z x Z/2Z. 

Theorem 5. Let A/Q be an abelian surface with everywhere potentially good re- 
duction. Then the order of the torsion subgroup #A(Q)[tors] is one of 

(4) 1 - 16, 18, 19, 20, 22, 24, 25, 28, 30, 36, 48, 60, 72. 

Theorem 3 was etablished for CM elliptic curves over Q by Loren Olson |01s| and 
for all elliptic curves over Q with integral j-invariant by Gerhard Frey [F^. What is 
notable is that the purely local methods of the Main Theorem rule out all possibili- 
ties except Z/5Z, which requires some global argument. We give a very short proof 
that Z/5Z cannot occur using part c) of the Main Theorem and the modularity 
theorem for elliptic curves. 

As for Theorem 4, it is a special case of work done by H.G. Zimmer and his col- 
laborators: indeed, in a sequence of papers |. . . Zl| . j. . . Z2| . |. . . Z3| they classify 
the torsion subgroup of an IM elliptic curve over number fields of degree 2 and 
3. The point here is that their work requires massive computation. Of course one 
expects the CM case to be easier; however, by capitalizing on a theorem of J. L. 
Parish [Parj , it turns out that the most naive possible approach gives an apparently 
reasonable algorithm for enumerating the torsion subgroups of CM elliptic curves 
over number fields of prime degree. This algorithm uses the solution of the class 
number one problem - i.e., that there are precisely 13 rational integers which are 
j-invariants of CM elliptic curves - but does not require any information about 
higher class numbers. To give an idea of the relative difficulties involved, it seems 
to the author that the amount of calculation needed to deduce the cubic case of 
Theorem 4 from the classification results of |. . . Z3j (i.e., to decide which of the IM 
elliptic curves have complex multiplication) could equal or exceed the calculations 
necessary to establish the theorem. 

Section 4 is devoted to the proof of Theorem 5. The methods are purely local 
(but use more than the Weil bound (1), which is surprisingly far from being sharp 
for higher-dimensional abelian varieties over F2 and F3). We end the paper with 
an incomplete discussion of the values of (5) that we know are attained: 11 entries 
on the list remain in doubt. 

This paper grew out of a chapter of the author's 2003 Harvard thesis |Cla| . whose 
general topic was local and global points on Atkin-Lehner quotients of Shimura 
curves, without and (especially) with Tq(N) and Ti(iV) level structure. The au- 
thor is indebted to his thesis advisor, Barry Mazur, for mathematical and moral 
support, and for general torsion-related inspiration. In particular versions of the 
Main Theorem, Theorem 1 and Theorem 5 appear there. We remark that the 
possible torsion subgroups of an abelian surface A/Q with potential quaternionic 
multiplication are significantly more restricted than the general IM case: e.g., the 
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maximum prime order of a torsion point is at most 7. These and other essentially 
quaternionic results will be treated elsewhere. 

2. The proof of the Main Theorem 

In Section 2.1 we prove part a) of the Main Theorem. Section 2.2 records a theorem 
of McCallum and some basic facts concerning Neron models and torsion points of 
abelian varieties over local fields. These facts must be very well-known, but we 
are not aware of suitable references, so for the convenience of the less experienced 
reader (and the author) we give complete proofs. In Section 2.3 we complete the 
proof of the Main Theorem and in Section 2.4 we discuss an improvement and some 
open problems. 

Throughout this section we use the following notation: K is a complete field, with 
discrete valuation v, valuation ring R, maximal ideal m, and residue field k. 

2.1. The proof of part a). Let A/K be a (i-dimensional abelian variety over a 
non- Archimedean local field K of finite residue cardinality q, a power of p. When 
A/K has good reduction, the bound of the theorem is very well known: indeed, the 
reduction map .A (If) [tors]' — > A(F g )[tors]' is an injection, so 

2d 

#A(X)[tors]' < #A{¥ q ) = #Kcr(l — F) = det(l - F \ T t {A)) = - A,), 

i=i 

where the Ai's are the characteristic roots of Frobenius acting on an ^-adic Tate 
module. By the Riemann hypothesis, ||Aj|| = yfq for any Archimedean norm || 
on Q(Ai). So #A(F 9 ) < (1 + ^) 2d , establishing (1). 

The point is that we can get exactly the same bound only assuming that A/K 
has potential good reduction. Indeed, according to |STI p. 498], we can find a 
finite totally ramified extension L/K such that A/L has good reduction. But now 
the prime-to-p torsion of A(K ) is contained in the prime-to-p torsion of A(L), which 
is isomorphic to the prime-to-p torsion of the good reduction A(¥ q ), i.e., we have 
reduced to the case of good reduction without increasing the residue field, so the 
bound of (1 + yfq) 2d still applies. 

2.2. Some preliminaries. 

We begin by recalling the following "strong form" of the criterion of Neron-Ogg- 
Shafarevich. 

Theorem 6. (Serre-Tate) Let A/K be an abelian variety with potentially good 
reduction over a complete field with residue characteristic p. For any N > 3 and 
prime to p, A acquires good reduction over the l-torsion field L = K(A[N\). 

For A/K a d-dimensional abelian variety, we write A/R for the Neron model of 
A/K. We will be almost entirely interested in the Neron special fibre A s := A®nk. 

Let 1Z : A(K) — A(R) — > A(k) — A s (k) be the reduction map (the first equal- 
ity is by the Neron mapping property). The kernel G 1 of 1Z is isomorphic to A(m), 
the if -analytic Lie group obtained by using the formal group law A as a group 
operation on m d . The following result bounds the torsion in G 1 . 
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Proposition 7. Let F(X,Y) be a d- dimensional formal group law over the valu- 
ation ring R of K , with associated "standard" K -analytic Lie group G 1 = F(m). 
Let H C G 1 be any finite subgroup. Then: 

a) The exponent of H divides p'p- 1 ' . 

b) The order of H divides q d ^p-^ . 

Proof: We recall three results concerning nitrations on standard groups [LALG, 
II. IV. 9], as simplified by our assumption that the valuation group is discrete. In- 
deed, in this case G 1 has a filtration by normal subgroups {G l — F{m l )}°°^ 1 . Let 
f r :x<—>x r be the rth power map. It is shown: first, that for all r prime to p, f r is 
an automorphism of G\\ second that for all i, G l /G l+1 = (k, +)" = (Z/pZ)-^™; and 
third, that when i > f P ■ G i — > G l+P is an isomorphism. The result follows 
from these facts. 

We now recall some facts about the structure of the Neron special fibre. There 
is a short exact sequence 

-> A° s -> A s -»■ $ -> 0, 

exhibiting the special fibre as an extension of a finite etale group scheme $/fc 
(the component group) by a connected commutative algebraic group A®. Like any 
commutative algebraic group, A® admits a (unique) Chevalley decomposition 

-»• U ®T A° s -»■ B ->■ 0, 

where U is a commutative unipotent group (the additive part, even though in pos- 
itive characteristic U need not be isomorphic to a power of G a ), T is a linear torus 
(the multiplicative part) and B is an abelian variety (the abelian variety part). 
Put A = dimC/, \i = dimT, ft — dim£>. It is standard to call the reduction purely 
additive if A = d. We shall also say that the reduction is atoric if \x = (this is not 
standard). 

Potentially good reduction is atoric |STI p. 500] (but no proof is given). More 
generally: 

Proposition 8. Let L/K be a finite extension of complete fields, and let A/K be 
an abelian variety. Then fj,(A/L) > fx(A/K) and f3(A/L) > f3(A/K). 

Proof: Because formation of the Neron model commutes with unramified base 
change, we may assume without loss of generality that the residue field k of K is 
separably closed. Let S be the valuation ring of L and A' / S be the Neron model 
of the base change of A to L. On the other hand, we have A/S = A/R ®ij S, the 
base change of the Neron model of A/K from R to S. If L/K is ramified, these two 
group schemes need not coincide, but at least the Neron mapping property applied 
to the smooth 5*-group scheme A/S and the identity map on the generic fibres 
gives us an 5-morphism (p : A/S — ► A'/S, and in particular a homomorphism of 
algebraic groups ip : A s /k — > A' s /k. The restriction of ip to T must land in the toric 
part T" of A', so if the toric rank has decreased, there exists some G m C ker((p). 
This means that for any £ ^ p, there exists a nontrivial ^-torsion point P G A s (k) 
mapping to zero in A' s (k). Now P lifts to a unique ^-torsion point P of the generic 
fibre A(L), and obviously ^ f(P)', thus <p(P) reduces to zero in the special fibre 
of A', but the kernel of the reduction map has no ^-torsion (see Proposition 7). A 
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similar argument works to show that is non-decreasing, as one checks immediately 
that if the abelian variety part of the special fibre over L has smaller dimension, 
the map (p on special fibres kills a nontrivial abelian subvariety of *4 S . 

The argument does not, of course, work to show that the additive rank is non- 
decreasing. Nevertheless, it gives the following useful fact: 

Proposition 9. Let A/K be an abelian variety over a complete field and L/K 
a finite field extension such that A/ L has good reduction. Then, the preimage of 
U{k) © T(k) in A(K)[tors\ is mapped (injectively) into the kernel of reduction G 1 
of AjL. 

Finally, we will need the following result, proved in |Mc( )\ : see also ELL . 

Theorem 10. (McCallum) Let K be a complete field with algebraically closed 
residue field and A/K a d-dimensional abelian variety with potentially good re- 
duction. Let L/K be the (unique, minimal, Galois) extension over which A aquires 
good reduction. 

a) The exponent o/$(fc) divides [L : K]. 

b) If a prime number £ divides #$(fc), I < 2A + 1 < 2d + 1. 

2.3. The proof of parts b) and c). 

We already have A(K)[tors]' < [(1 + ^/q) 2d ], so it suffices to bound A(K)\p°°}. By 
the work of the previous section, there is a filtration on A(K) whose sucessive quo- 
tients are $(fc), A®(k) and G\. Intersecting the filtration with A(K)\p°°], we get 
subgroups Hi, H 2 , H 3 of these quotients, such that #A(K)\p°°] = #Hi-#H 2 -#H 3 . 
We will discuss each in turn. 

By Proposition 7, we have #H 3 < #(Gi)[tors] < p fd ^\ 

By Theorem 11, the exponent of the (geometric) component group divides the 
order of [L : K unl '], where L/K unr is the (unique, minimal, Galois) inertial exten- 
sion over which A acquires good reduction. By Theorem 6, the Galois group of 
L/K unl injects into Aut(E[N]) for any N > 3 and prime to p, which by definition 
of m p (2d) means exp(ifi) < exp(<&[p°°]) | p m p( 2d )_ But A(if) [tore] is generated by 
2d elements, hence so is Hi, hence #H 3 [p°°] \ p 2dm p( 2d ) . 

Finally, A.® is an extension of an abelian variety of dimension d — X by a commu- 
tative unipotent group of dimension A. Recall that a commutative unipotent group 
U over an algebraically field of characteristic p is isogenous to a direct product of 
finite Witt-vector groups [AGCFI p. 176] - in particular, since dim[/ = A < d, we 
have U(¥ q ) = U(¥ q )[p x ] of cardinality p fx . Since (1 + ^/q) 2a > q a , the worst-case 
scenario for H 2 is good reduction, and #H 2 < [(1 + y/q) 2d ]p- 

Taking the product of these three bounds and the bound of part a) gives the 
proof of part b). 

Now assume that A/K has purely additive reduction. 

By Theorem 10b), the only primes dividing are those £<2A + l<2<i+l. 
Since in the purely additive case A (if) [tors]' &(k), this gives the first assertion 
of part c). 

As for the second assertion, we want to derive a different bound which is in- 
dependent of p and /. Since p 2dm p (2rf) < max {#G£2d(F 3 ) 2d , #GL 2d (¥ 5 ) 2d } < 
#GL 2 d(¥5) 2d , the bound on is already independent of p. The bound on Hi 

technically depends on p, but in a wonderful way: linip^oo j/^p^l = 1, so it may 
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be taken to be independent of p. Moreover, by Proposition 7a) the exponent of Gi 
is independent of /, hence, reasoning as above, the order of H3 is independent of /. 
Finally, the H2 term is handled by Proposition 9, which tells us that H2 injects into 
"an i?3," i.e., into the points of a formal group whose ramification index is bounded 
by e • #GL2d(P)-, where I is any odd prime different from p. This completes the 
proof of the Main Theorem. 

2.4. Comparisons with the elliptic curve case. 

The case of elliptic curves with purely additive reduction was studied by Flexor 
and Oesterle |EQ|; they showed E(K)[tors] < 48e(K/Q p ). Part c) of the Main 
Theorem can be regarded as a generalization of this, and especially of the existence 
of a bound independent of p and the residual degree /. 

However, our result does not completely generalize the elliptic curve case, because 
Flexor and Oesterle do not need to assume that the reduction is potentially good; 
rather, only that it is not split multiplicative. The essential fact used is the bound 
#$(fc) < 4 for the component group in this case, a well-known consequence of 
Tate's algorithm. It is probable that there is an absolute bound for the exponent 
(and even the order) of $ for an arbitrary atoric abelian variety, but this is only 
known for the prime-to-p part. 

Nevertheless, X. Xarles |Xa| has shown that torsion is strongly bounded among 
all d-dimensional abelian varieties over a p-adic field whose Neron special fibre 
does not contain a nontrivial split torus. Moreover, in the case of purely additive 
reduction, his bound depends only on d and e(K/Q p ). 

3. Elliptic Curves over Number Fields 

3.1. Elliptic curves E/Q. Let E/Q be a rational elliptic curve with everywhere 
potentially good reduction. In particular we have potentially good reduction at 
2, so by Theorem la) the odd-order torsion in E(Q) is a group of order at most 
[(1 + V2) 2 ] = 5, so is either trivial, or Z/3Z or Z/5Z. But also we have good reduc- 
tion at 3, so the prime-to-3 torsion subgroup injects into a group of order at most 
[(1 + n/3) 2 ] = 7, so is trivial, or is Z/2Z, Z/2Z x Z/2Z, Z/4Z or Z/5Z. Finally, the 
prime-to-5-torsion injects into a group of order at most [(1 + V5) 2 ] = 10. Collating 
this information and comparing with the statement of Theorem 3, we see that what 
remains to be shown is that there cannot exist a rational 5-torsion point. 

Now we use that E/Q does not have everywhere good reduction, a well-known 
theorem of Tate; it is also an immediate consequence of the elliptic modularity the- 
orem. Moreover, we claim that there is a prime p ^ 5 of bad reduction. Otherwise 
the (modular!) elliptic curve would have to have conductor 25, and since X (25) 
has genus zero, there are no such elliptic curves. Thus we get a prime p of bad, so 
necessarily purely additive reduction, and part c) of the Main Theorem applies to 
show that E(Q p )[S\ = 0, and a fortiori E(Q)[5] = 0. 

That all these groups occur already among elliptic curves E/Q with j-invariant 
or 1728 is a very classical fact, which can readily be reestablished by looking at 
the Weierstrass equations y 2 = x 3 + Dx (j = 0) and y 2 = x 3 + D (j = 1728). This 
completes the proof of Theorem 3. 
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3.2. A miscellany of bounds. Note that the bounds of Corollary 2 are exponen- 
tial in both the dimension d and the number field degree n. That the bound is expo- 
nential in d cannot be helped: if E/Q is a CM elliptic curve with £J(Q)[tors] = Z/6Z, 
then E d is a d-dimensional abelian variety with integral moduli and a torsion group 
of size Q d . Since 6 d is, with respect to d, the leading term in the bound of Corollary 
2a), this bound looks quite good when d is large compared to n. 

On the other hand, there is no reason to believe that the optimal bound for the 
torsion subgroup of an elliptic curve E over a degree n number field should be 
exponential in n, even if we do not restrict to integral moduli. Indeed, there is 
evidence to the contrary: Hindry and Silverman HS^ showed that by restricting 
to elliptic curves with everywhere good reduction over a number field of degree d, 
the torsion subgroup is at most 0(d\ogd) (with an explicit constant). Moreover, 
Silverberg |Sg92| gives bounds for CM abelian varieties of every dimension: when 
d is large compared to n, our Corollary 2 still gives better bounds, 3 but when n is 
large compared to d, Silverberg's bounds are much, much better. 

In the case of elliptic curves an independent, and more elementary, proof of Sil- 
verberg's theorem was given by Prasad and Yogananda |P Y) . Here is the bound: 

Theorem 11. (Silverberg, Prasad-Yogananda) Let E / K be an O- CM elliptic curve 
over a number field K of degree n. Then 

ip{e) < 5(#p{0))n, 

where e is the exponent of E(K)[tors], and 5 is ^ if K contains the CM field and 
is 1 otherwise. Moreover, if K does not contain the CM field, then the same bound 
holds for the order of the torsion subgroup. 

For example, when n = 5, Corollary 2b) says that the largest prime dividing the 
torsion subgroup is at most 43, whereas Theorem 11 tells us that the largest prime 
divisor is at most 31. 

The values of N for which a CM elliptic curve E/K can have full iV-torsion are 
especially restricted. Indeed we state without proof the following result (it is a 
consequence of the main theorem of complex multiplication): 

Proposition 12. Let E/K be a CM elliptic curve over a number field. If for some 
positive integer N > 3, (Z/NZ) 2 ^ E(K)[tors], then H(N) C K, where H(N) is 
the ring class field of conductor N. 

Remark: Since <Q(CaO is contained in H(N), it follows that K must contain the 
iVth roots of unity; of course this latter containment holds for all elliptic curves by 
the Galois equivariance of Weil's e jv-pairing. The proposition tells us that in the 
CM case, for N > 3, Q(E[N\) will typically be much larger than Q(Cjv)- 

A moment's reflection reveals that it ought to be the case that the elliptic curves 
defined over a degree n number field with the largest torsion subgroups are those 
which arise via base change from a smaller field, or especially, from Q. A beautifully 
precise confirmation of this for CM elliptic curves is given by the following result 
of J.L. Parish |Parj . 



^The bounds of Corollary 2 restricted to CM varieties also supercede those of IVanMI . 
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Theorem 13. (Parish) Let E/K be a CM elliptic curve which is minimally defined 
over K - i.e., K = Q(j(E)) - and let F be the compositum of K with the CM field. 
Then the order of a torsion point on E{F) is 1, 2, 3, 4, or 6. Moreover, the torsion 
subgroup of E(K), if not cyclic, is of the form Z/2Z x Z/2Z. 

3.3. An algorithm for enumerating torsion subgroups of CM elliptic curves 
over number fields of prime degree. 

Suppose n is a prime number. We give a procedure for enumerating the torsion 
subgroups of CM elliptic curves over degree n number fields. 

We will assume first that n is odd; the case n = 2 will be settled at the end of the 
section. Because n is odd, Proposition 11 (or even the remark following it) allows 
us to conclude that 75(A) [tors] is of the form Z/TVZ x Z/aZ, where a | gcd(N, 2). 
In particular, the odd-order torsion subgroup is cyclic. 

First of all, the groups Z/nZ for n e {1,2,3,4,6} and Z/2Z x Z/2Z occur over 
Q, hence will by base change occur for all degrees n. (It follows easily from the 
strong boundedncss of torsion on elliptic curves that if E/K is an elliptic curve 
over a number field and n a positive integer, then there are at most finitely many 
degree n field extensions L/K such that A(A)[tors] C A(L)[tors].) 

Now the key point is that since n is prime, either Q(j(E)) = Q or Q(j(E)) = K. But 
Theorem 12 tells us precisely that in the latter case we will not get any torsion sub- 
groups other than those of the last paragraph. Thus, it suffices to restrict attention 
to the 13 Z-integral CM j-invariants, namely 0, 1728, 2 4 3 3 5 3 , -2 15 35 3 , 2 3 3 3 11 3 , 
- 3 3 5 3 , 3 3 5 3 17 3 , 2 6 5 3 , -2 15 , -2 15 3, -2 18 3 3 5 3 , -2 15 3 3 5 3 11 3 , -2 18 3 3 5 3 23 3 29 3 . 

The first step of the algorithm is to apply Corollary 2 and/or Theorem 11 to compile 
a short list of candidate values of TV. Then, for each such value of TV not in the set 
{1,2,3,4,6} and each ji, 1 < i < 13, there is a very direct way to decide whether 
or not there exists an elliptic curve E over a degree n field with j(E) = ji and 
Z/TVZ C A(A)[tors]: namely, we compute the zero-dimensional subscheme Tjv,j 4 of 
Xi(TV)/Q obtained as the preimage of the point ji G A : (Q) under the map 

Xi(TV) -> A(l) -4 P 1 . 

As we will shortly describe, Twj i may be represented as a zero-dimensional ideal 
in a multivariable polynomial ring over Q. Its radical thus determines a finite etalc 
Q-algebra - i.e., a product of number fields J\i=i ~~ an d we define the degree 
sequence D(N,ji) to be the /-tuple giving the degrees over Q of each such num- 
ber field Ki. Thus, there exists an TV-torsion point on a CM elliptic curve with 
j-invariant ji defined over a number field of degree n if and only if n appears in the 
degree sequence D(N,ji). Moreover, if it does, this procedure allows us to actually 
write down the corresponding elliptic curve, and its full torsion subgroup may be 
determined. 

We now explain how T^j i may be computed. Suppose we have (E,P)/K, where 
A is a field of characteristic zero, E/K is an elliptic curve and P € E(K) is a point 
of exact order TV > 4. Starting with any given Weierstrass model for E, one can 
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make a linear change of variables to get the Kubert normal form 
E(b, c) : y 2 + (1 - c)xy - by — x 3 - bx 2 , b, c £ K, 

with ^-invariant 

(((1 - c) 2 - 46) 2 + 246(1 -c)) 3 



6 3 (((1 - c) 2 - 46) 2 + 8(1 - c) 3 - 276 - 9(1 - c)((l - c) 2 - 46)) ' 

The function j(b,c) is the composite function we want, since Q(Xi(N)) = Q(6, c). 
As for the relations between 6 and c, they can be computed directly from the group 
law, i.e., by writing down the equations corresponding to [N]P — 0, [i]P ^ for 
< i < N. When Xi(N) has genus zero, the j-function on X(l) can be given 
as a rational function in some parameter T on X\(N), so that to compute Tjy j. 
amounts to factoring a one-variable polynomial over Q. Indeed, the parameteriza- 
tions T are "classical," having been computed by Kubert |Kubj in his exploration of 
Ogg's conjecture - i.e., Mazur's theorem - on the torsion subgroup of E/Q. Work 
of Reichert |Rei| demonstrates that computing the relations between 6 and c is not 
essentially more difficult in the higher genus situation; indeed he computes such 
relations (his "raw forms") when N = 11, 13, 14, 15, 16, 17, 18; note that Xi(17) 
has genus 5. Since [(1 + 2 3 / 2 ) 2 ] = 14, Corollary 2 tells us that the largest prime 
value of N that we need consider in order to prove Theorem 4 is 13. Thus, in 
order to prove Theorem 4 for n = 3, it suffices to type the equations of IKub| and 
|Rei| and the above list of J-invariants into a computer algebra system and record 
the degree sequences. They are as follows: (the j-invariants are listed in the same 
order as above; to save space, when a degree sequence {d\, . . . , d[) is repeated a > 1 
times, we denote it by (d\, . . . , di) a ): 

Z/4Z: (2), (1, 2), (2, 4), (6), (1, 1, 4), (2, 2, 2), (2, 4) 2 , (6) 5 

Z/5Z: (4), (2, 4), (12) 2 , (4, 8), (12) 3 , (4, 8) 2 , (12) 3 

Z/6Z: (1, 3), (2, 4), (1, 2, 3, 6), (3, 9), (4, 8) 3 , (2, 2, 4, 4), (6, 6), (12) 4 

Z/7Z: (2, 6), (12), (6, 18) 2 , (24), (3, 21) 2 , (24) 2 , (6, 18), (24) 3 

Z/8Z: (8), (4, 8), (8, 16), (24), (4, 4, 16), (4, 4, 8, 8), (4, 4, 16), (8, 16), (24) 5 

Z/9Z: (3, 9), (18), (9, 27), (36) 4 , (6, 12, 18) 2 , (36) 4 

Z/10Z: (12), (2, 4, 4, 8), (12, 24), (36), (4, 8, 8, 16), (12, 24) 5 , (36) 3 

Z/11Z: (20), (30), (60) 3 , (10, 50) 3 , (5, 55), (10, 50) 2 , (60) 2 

Z/12Z: (4, 8), (8, 16), (4, 8, 12, 24), (48), (8, 8, 32), (16, 16, 16), (16, 32), (8, 8, 16, 16), (24, 24), (48) 4 
Z/13Z: (4, 24), (6, 36), (12, 72), (84), (12, 72), (84) 5 , (12, 72), (84) 2 

Kubert also gives defining equations for genus zero torsion structures of the form 
Z/2Z x Z/2A/Z, so we give those degree sequences as well: 

Z/2Z x Z/4Z: (4), (2, 4), (4, 8), (12), (2, 2, 8), (4, 4, 4), (4, 8) 2 , (12) 5 

Z/2ZXZ/6Z: (2, 6), (4, 4, 4), (2, 2, 2, 6, 6, 6), (24), (8, 8, 8) 3 , (4, 4, 4, 4, 4, 4), (6, 6, 12), (24) 4 
Z/2ZxZ/8Z: (16), (8, 8, 8), (8, 8, 16, 16), (48), (4, 4, 8, 16, 16), (4, 4, 4, 4, 8, 8, 16), (8, 8, 16, 16) 2 , (48) 5 

Remark: For fixed N and for all ji except and 1728, the sums of the degree 
sequences are constant, and equal to the degree of the natural map ip : Xi(N) — > 
Xi(l), whereas the total degrees at j = and j = 1728 are always smaller: this 
exhibits the well-known fact that <p is ramified only at j = and j — 1728 (and 
possibly at the cusps). 
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To complete the proof of Theorem 4 for n — 3 we need only look at the three 
instances of "3" among the degree sequences and compute the full torsion sub- 
group of each of the corresponding elliptic curves. These three elliptic curves are 
given, in Kubert normal form, by the following values of b and c: 

K = Q[d]/(d 3 -d 2 -2d+l), b = 2d-l, c = d 2 -d, E(K)[tovs] S Z/14Z. 
K = <Q[d]/{d 3 -lbd 2 + \2d+l), b = 14d 2 -12d-l, c = d 2 -d, E(K)[tors] ^ Z/14Z. 

K = Q[/]/(/ 3 - 3/ 2 + 1), b = 13/ 2 - / - 5, c = 2f 2 - 1, E(K)[tors] £* Z/9Z. 

For the case n — 2, we must contemplate the possibility that (Z/iVZ) 2 C E(K)[tors] 
for N = 3, 4 or 6. 

For N — 3, the modular curve X(3)/Q(( 3 ) is again "parameterizable" (i.e., of 
genus zero): Q((^3)(X(3)) = Q(C(3))(A), and the equation of the universal elliptic 
curve over the generic fibre is especially well-known: it is the Hesse curve 

E X :X 3 + Y 3 + Z 3 + XXYZ = 0. 

Here, if we take O = [1 : — 1 : 0], then a basis for E[3] is given by S — [1, (3, 0], T = 
[1, 0, —1]. The j-invariant of the Hesse curve is 

_ A 12 - 648A 9 + 139968A 6 - 10077696A 3 
3x3( >~ —A 9 - 81A 6 - 2187A 3 - 19683 ' 

Using this, one sees that the unique CM elliptic curve over (QKC3) with full 3-torsion 
is the Fermat curve X 3 + Y 3 + Z 3 = 0, whose full torsion group is (Z/3Z) 2 . In 
particular there is no CM elliptic curve over a quadratic field with full 6-torsion. 4 

The case of (Z/4Z) 2 C E(K)[tors] can be ruled out by analyzing the three in- 
stances of "2" in the degree sequences for (Z/2Z x Z/4Z) (or indeed by looking at 
r(4) level structure, which has an equally well-known parameterization). For the 
sake of variety, we give the following alternate argument: if E/K is any elliptic 
curve defined over a quadratic number field with full 4-torsion, then necessarily 
K = Q(C4). So 5 splits in K, and if E has integral moduli, the 4-torsion would 
have to reduce injectively into an elliptic curve over F5, which however has order 
at most [(1 + V5) 2 ] = 10. Thus it is impossible for an IM elliptic curve over a 
quadratic field to have full 4-torsion. 

This completes the proof of Theorem 4. 

4. ABELIAN SURFACES OVER Q 

4.1. Bounds obtained from the Main Theorem. Let A/Q be an IM abelian 
surface. As usual, applying part a) of the Main Theorem prime by prime leads to 
a short list of possible orders of torsion groups. Indeed, in this case, the odd order 
torsion injects into a group of order at most #^(¥2) < [(1 + \/2) 4 ] = 33 and the 
prime-to-3 torsion injects into a group of order atmost #A(F 3 ) < [(1 + V3) 4 ] = 55. 



Ironically, since ^(6) has genus one and an order six automorphism with a fixed point, it too 
must be the Fermat curve X 3 + Y 3 + Z 3 = 0. 
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This implies that the the possible orders of torsion groups are of the form 2 a ■ y, 
where < a < 5 and y lies in the set 

(5) 1, 3, 5, 7, 3 2 , 11, 13, 3 • 5, 17, 19, 3 • 7, 23, 5 2 , 3 3 , 29, 31, 3 • 11. 

4.2. Some Tate-Honda Theory. Suppose one wishes to enumerate all the possi- 
ble values of #A(F 9 ), where A/¥ q is a <i-dimensional abelian variety. Recall that for 
two abelian varieties A%, Ai over F 9 , the following are equivalent: a) that they are 
isogenous, b) that their Frobenius characteristic polynomials coincide, c) that they 
have the same number of rational points over every finite field extension. Thus, to 
perform the enumeration, it is enough to know the set of all Frobenius polynomials 
P(T) of d-dimensional A/¥ q : just evaluate at T = 1. 

This problem - namely, which polynomials arise as Frobenius polynomials? - is 
addressed by the theory of Tate and Honda. The definitive introduction to this 
theory is still to be found in Waterhouse's thesis | Wat| : here we will just give an 
"explicit formula" for #A(¥ p ) where A is an abelian surface. 

Proposition 14. There are three "types" of abelian surface A/¥ p , whose Frobenius 
polynomials are as follows: 

a) Type I: Pa{T) — (T 2 — a\T + p)(T 2 — a^T 1 + p), where <Xi, a-i are integers such 
that |<zi|, |oa| < 2^/p; #A(F P ) = (p+ 1 - oi)(p + 1 - a 2 ). 

b) Type II: P A (T) = (T 2 - pf ; #A(¥ p ) = (p - l) 2 . 

c) Type III: P A (T) = T 4 — 2aT 3 + (a 2 + 2p - 2db 2 )T 2 - 2apT + p 2 , where d > 1 is 
a squarefree integer, a, b € are such that a + b\/d is in the ring of integers of 
Q(Vd), b^O and \a\ + \b\Vd < 2^/p; #A(F p ) = 0+ l) 2 + (a- l) 2 - 2ap- db 2 - 1. 

Proof: If A/¥ q is an abelian surface, then either A ^ ¥ E\ x E% or A is F g -simple. 
The former case is Type I, so it suffices to consider the F g -simple (henceforth called 
"simple," which is not to be confused with geometrically simple) case. 

If A/¥ q is a simple abelian surface, its Frobenius polynomial Pa(T) is a quar- 
tic Weil g-polynomial, i.e., a polynomial in Z[T] whose roots have norm yjq under 
every Archimedean valuation. Moreover, Pa is either irreducible or is of the form 
Q(T) 2 for Q(T) an irreducible quadratic. Over a general finite field F g it is some- 
what intricate to describe which Weil polynomials of the second type correspond 
to abelian surfaces, but over ¥ p this can only happen if the field Q(tt) generated 
by a Frobenius root it is real, i.e., ir — (±)^fp. This is Type II. Otherwise Q(7r) 
is a quartic CM field which is best understood in terms of the real quadratic sub- 
field Q(/3), where = tt + £ . Indeed, the condition on /3 that it be "the /3" of 
some quartic Weil p-number it is just that it be an irrational real quadratic integer 
j3 = a + bVd which has norm strictly less than 2^/p in both Archimedean valuations, 
i.e., \a\ + \b\Vd < 2*Jp. The corresponding 7r is then a solution of T 2 — [3T + p = 0. 
This is Type III. 

4.3. The proof of Theorem 5. Using Proposition 14, we record #A(¥ p ) for 
p = 2, 3, 5: 

Fact 15. Let A/¥ p be an abelian surface over the finite field ¥ p , p < 5. Then: 
#A(F 2 ) = 1-16, 19, 20, or 25. 
#A(F 3 )= 1 - 16, 18 - 25, 28- 30, 34- 36, 42, or 49. 
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#A(F 5 )=4, 6 - 50, 52 - 56, 58- 64, 69- 72, 79- 81, 90, or 100. 

Note the sparsity for p = 2 and p — 3: by the time we get to p — 5 there is such an 
enormous interval of assumed values that nothing further is ruled out. 5 

Working prime by prime, we now use Fact 15 to eliminate many of the values 
from the list 2° -y, 1 < a < 5, y in the list (6) (e.g., we can in fact take a < 4), and 
in doing so we arrive at the list (4) of Theorem 5. 

4.4. Some attained values of N. Let us discuss which values of the list (4) we 
know do arise. 

If Ex, E 2 /Q are two IM elliptic curves, then A := E\ X E 2 /Q is an IM abelian 
surface, and A(Q)[tors] = £?i(Q)[tors] x E 2 (Q) [tors] . Thus, using Theorem 3, the 
orders of [tors] arising in this way are: 1 - 4, 6, 8, 9, 12 18, 24, 36. 

If E/K is an IM elliptic curve over a quadratic field, then A := Hbsk/q(E), the Weil 
restriction of E from K to Q, is an IM abelian surface with A(Q) [tors] = E(K) [tors] . 
Thus the classification of torsion subgroups on IM elliptic curves over quadratic 
fields of |. . . Zlj becomes relevant: it turns out that, in addition to the groups of 
Theorem 4a), there arise Z/5Z and Z/8Z. So in this way, we get additional orders 
5, 7, 10 for A(Q) [tors]. 

The abelian surface Ji(13)/Q - i.e., the Jacobian of the modular curve Xl(13) 
- has integral moduli and Ji(13)(Q)[tors] = Z/19Z. Thus 19 arises. 

The abelian surface Ji(16)/Q has integral moduli and Ji(16)(Q)[tors] = Z/2xZ/10. 
Thus 20 arises. 

So to complete the classification of orders of torsion subgroups of IM abelian sur- 
faces A/Q, it remains to decide which of the following eleven values occur: 

(6) 11, 13, 14, 15, 22, 25, 28, 30, 48, 60, 72. 
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